$ rpki-client -vvvf rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.mft File: B7A0E7998A9F266F3882F19118691CB225356F5D.mft (raw, json) Hash identifier: PhyqYet8NRSZtoxOBkQC6mMtxXOcw5mwNP5Xa1uHu8A= Subject key identifier: 2E:01:76:80:41:DA:92:52:D8:11:F2:13:EF:E7:AD:AA:EC:ED:F2:CD Authority key identifier: B7:A0:E7:99:8A:9F:26:6F:38:82:F1:91:18:69:1C:B2:25:35:6F:5D Certificate issuer: /CN=B7A0E7998A9F266F3882F19118691CB225356F5D Certificate serial: 281FCF4790D835D10A2905125608C0548540460D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7A0E7998A9F266F3882F19118691CB225356F5D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 18:56:05 +0000 Manifest this update: Wed 02 Sep 2026 18:51:05 +0000 Manifest next update: Thu 03 Sep 2026 22:23:05 +0000 Files and hashes: 1: 3130332e34372e31302e302f32332d3233203d3e203539323733.roa (hash: zUqTI/Bo3fTJZJzitShFowGX98l0p/JLTSiXxFVwOj4=) 2: B7A0E7998A9F266F3882F19118691CB225356F5D.crl (hash: U57GLz8tPrrpHT3VG1pFH+K+uanPVS7lSHTaMlo+iHw=) 3: 3130332e34372e31312e302f32342d3234203d3e203539323733.roa (hash: i7xKoh7QIZf/wi1EOh2BtN5rz2lc5CUAErnYSBr7+OA=) 4: 3130332e34372e31302e302f32342d3234203d3e203539323733.roa (hash: bqleVr/CtV0kID5GQzDKQocY8p72teKu2kr0m36+c90=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.crl rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7A0E7998A9F266F3882F19118691CB225356F5D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 22:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:1f:cf:47:90:d8:35:d1:0a:29:05:12:56:08:c0:54:85:40:46:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7A0E7998A9F266F3882F19118691CB225356F5D Validity Not Before: Sep 2 18:51:05 2026 GMT Not After : Sep 3 22:23:05 2026 GMT Subject: CN=2E01768041DA9252D811F213EFE7ADAAECEDF2CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:db:f8:f5:34:aa:80:dd:d2:4c:8f:33:92:87: 4c:75:de:7e:59:bb:44:06:4e:ee:b9:da:dc:a9:4f: e0:ce:cd:14:06:ba:e6:50:95:e6:5c:83:8e:e4:a6: 1f:bd:2c:94:e2:7f:8d:ff:b1:5c:30:8a:69:53:ac: 94:aa:b7:f3:a1:3d:a6:10:1e:20:db:ea:1b:77:48: 72:df:cf:fe:c6:e1:ae:d2:c4:b8:34:74:00:88:44: c1:a1:ad:17:ea:49:61:ac:e8:10:5c:cd:46:ca:59: c4:62:2b:e7:47:fd:86:de:27:7d:d9:9c:73:7d:3e: 38:9b:b6:7d:40:92:dc:7f:ee:4a:db:88:fa:93:b1: be:ad:47:40:64:73:c9:a0:61:a2:62:fa:b8:63:5d: e5:b4:03:09:c4:6c:b5:02:a9:0f:5f:7f:03:b1:d2: 32:77:7a:7f:95:8c:99:0f:a5:c4:29:f5:bb:dd:9f: 0c:24:43:ba:60:46:0e:34:d3:4c:bd:ab:4e:56:f8: 59:e7:04:27:9c:6e:15:6f:89:36:52:e0:76:74:df: 86:64:86:19:b7:28:d7:e5:e9:f1:1c:e1:36:fb:ad: 72:c3:01:d7:39:57:56:48:c1:f4:ba:9d:4e:5d:7f: 6e:b0:26:21:f6:a1:07:f2:28:c0:32:ec:f8:9d:7c: 65:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:01:76:80:41:DA:92:52:D8:11:F2:13:EF:E7:AD:AA:EC:ED:F2:CD X509v3 Authority Key Identifier: keyid:B7:A0:E7:99:8A:9F:26:6F:38:82:F1:91:18:69:1C:B2:25:35:6F:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7A0E7998A9F266F3882F19118691CB225356F5D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:fa:89:d9:7e:9a:52:3a:b3:7a:f1:3b:8c:ea:94:89:f8:1a: f3:01:a3:b5:65:cb:44:69:94:bd:98:39:03:d3:1b:66:8e:a7: 40:61:ed:01:17:1d:fb:c1:93:43:d7:69:1c:a6:d0:4f:e5:de: 47:64:94:d0:79:b8:87:20:a2:c2:9c:be:d8:74:bc:96:bd:47: dd:d5:b7:6e:bb:98:98:75:7b:81:5a:b3:a0:d9:02:b5:8b:54: 5d:e9:0d:76:c9:2c:c8:90:a7:f8:b4:51:fc:d3:90:53:e2:f3: 08:0a:d1:85:af:17:7b:97:d9:f2:a6:4c:2e:4d:67:25:9f:c9: 68:a5:36:57:4c:97:60:3f:d2:07:9a:41:96:ff:cb:45:af:eb: cb:5f:2f:3d:be:fe:c7:b9:5b:49:a9:7a:b8:84:c3:21:59:51: 83:d8:79:23:19:cb:47:60:db:58:03:24:a5:d4:99:8a:37:b0: 47:52:a4:26:b6:bb:7f:7f:08:19:04:69:3c:0f:35:d6:eb:c6: f2:62:c5:9a:a5:03:6c:15:b5:c3:a3:6c:8d:d3:37:d2:05:cc: 0c:91:6c:d5:2c:45:85:e7:48:9c:f2:59:b0:cc:35:21:ca:e4: e0:22:35:b0:35:54:db:7b:35:de:37:95:37:16:4e:16:fa:8f: f3:e3:a9:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKB/PR5DYNdEKKQUSVgjAVIVARg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdBMEU3OTk4QTlGMjY2RjM4ODJGMTkxMTg2OTFDQjIy NTM1NkY1RDAeFw0yNjA5MDIxODUxMDVaFw0yNjA5MDMyMjIzMDVaMDMxMTAvBgNV BAMTKDJFMDE3NjgwNDFEQTkyNTJEODExRjIxM0VGRTdBREFBRUNFREYyQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw2/j1NKqA3dJMjzOSh0x13n5Z u0QGTu652typT+DOzRQGuuZQleZcg47kph+9LJTif43/sVwwimlTrJSqt/OhPaYQ HiDb6ht3SHLfz/7G4a7SxLg0dACIRMGhrRfqSWGs6BBczUbKWcRiK+dH/YbeJ33Z nHN9Pjibtn1Aktx/7krbiPqTsb6tR0Bkc8mgYaJi+rhjXeW0AwnEbLUCqQ9ffwOx 0jJ3en+VjJkPpcQp9bvdnwwkQ7pgRg4000y9q05W+FnnBCecbhVviTZS4HZ034Zk hhm3KNfl6fEc4Tb7rXLDAdc5V1ZIwfS6nU5df26wJiH2oQfyKMAy7PidfGU7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULgF2gEHaklLYEfIT7+etquzt8s0wHwYDVR0j BBgwFoAUt6DnmYqfJm84gvGRGGkcsiU1b10wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjVhNzJlYjktOGU1My00NDcyLWEzNWEtZmVlOGJmMGFmNDZmLzAvQjdBMEU3OTk4 QTlGMjY2RjM4ODJGMTkxMTg2OTFDQjIyNTM1NkY1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0EwRTc5OThBOUYyNjZGMzg4MkYxOTExODY5MUNCMjI1MzU2 RjVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjVhNzJlYjktOGU1My00NDcyLWEz NWEtZmVlOGJmMGFmNDZmLzAvQjdBMEU3OTk4QTlGMjY2RjM4ODJGMTkxMTg2OTFD QjIyNTM1NkY1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACn6idl+mlI6s3rxO4zqlIn4GvMBo7Vly0Rp lL2YOQPTG2aOp0Bh7QEXHfvBk0PXaRym0E/l3kdklNB5uIcgosKcvth0vJa9R93V t267mJh1e4Fas6DZArWLVF3pDXbJLMiQp/i0UfzTkFPi8wgK0YWvF3uX2fKmTC5N ZyWfyWilNldMl2A/0geaQZb/y0Wv68tfLz2+/se5W0mperiEwyFZUYPYeSMZy0dg 21gDJKXUmYo3sEdSpCa2u39/CBkEaTwPNdbrxvJixZqlA2wVtcOjbI3TN9IFzAyR bNUsRYXnSJzyWbDMNSHK5OAiNbA1VNt7Nd43lTcWThb6j/Pjqco= -----END CERTIFICATE-----Generated at Thu Sep 3 13:01:17 2026 by rpki-client